Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/XFTH_rFNMHU3CpipgsXgF-ZxpPg.roa
File: XFTH_rFNMHU3CpipgsXgF-ZxpPg.roa (raw, json)
Hash identifier: ZEolc+/oqCztR0e2rcSj5ENoA2IsjsICsvyQsk3WLQY=
Subject key identifier: 5C:54:C7:FE:B1:4D:30:75:37:0A:98:A9:82:C5:E0:17:E6:71:A4:F8
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0194258FB30F8F81C50DF5D49D49F1829D2B
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/XFTH_rFNMHU3CpipgsXgF-ZxpPg.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39442
IP address blocks: 92.39.104.0/21 maxlen: 21
185.125.72.0/22 maxlen: 22
185.183.48.0/22 maxlen: 22
188.247.32.0/19 maxlen: 19
188.247.40.0/24 maxlen: 24
188.247.44.0/22 maxlen: 22
188.247.44.0/24 maxlen: 24
188.247.55.0/24 maxlen: 24
188.247.56.0/21 maxlen: 21
213.234.0.0/20 maxlen: 20
213.234.0.0/24 maxlen: 24
213.234.1.0/24 maxlen: 24
213.234.5.0/24 maxlen: 24
213.234.6.0/24 maxlen: 24
213.234.8.0/24 maxlen: 24
213.234.10.0/24 maxlen: 24
213.234.11.0/24 maxlen: 24
213.234.16.0/22 maxlen: 22
213.234.16.0/24 maxlen: 24
213.234.18.0/23 maxlen: 23
213.234.20.0/24 maxlen: 24
213.234.21.0/24 maxlen: 24
213.234.22.0/24 maxlen: 24
217.149.176.0/20 maxlen: 20
217.149.176.0/22 maxlen: 22
217.149.181.0/24 maxlen: 24
217.149.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b3:0f:8f:81:c5:0d:f5:d4:9d:49:f1:82:9d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c54c7feb14d3075370a98a982c5e017e671a4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:05:57:e6:c0:66:2d:99:e9:fa:66:23:5c:
c0:62:f7:0d:90:00:0c:42:4b:6d:76:b7:66:cc:f9:
a6:af:ed:17:24:3c:6f:e5:1a:dc:43:df:9d:c9:01:
36:62:14:45:f4:1b:ad:3c:50:09:01:2d:40:80:d4:
7d:dd:2c:bc:5d:af:c6:8e:92:40:d1:b3:ee:6a:b5:
53:90:cc:29:b8:ad:c5:0e:02:79:ce:65:9f:e1:7e:
02:2c:e6:2f:bc:c8:68:57:b3:34:8b:64:9d:78:ae:
be:14:ce:46:85:ee:f1:34:ef:ce:ca:88:7b:70:93:
6f:b8:84:45:0c:8b:41:09:df:8e:5b:5e:ae:17:d1:
5a:65:f0:23:2d:d0:cf:0d:61:15:b8:df:86:d5:56:
a6:ce:ca:7c:c4:f3:11:2b:a5:eb:70:db:4a:f3:67:
4e:5e:2d:e4:41:0a:6d:19:df:71:b7:5f:ed:ba:e8:
64:6f:98:22:97:28:f0:e6:01:e0:f7:99:76:97:5a:
b3:ad:69:fa:ad:cf:42:98:cf:dd:90:07:bc:f4:29:
3e:70:e1:72:2c:f8:24:79:30:fb:68:5c:fe:db:0c:
a6:08:df:95:d4:81:04:76:f7:c0:56:b4:e7:df:af:
8e:a2:fc:68:35:de:a1:b3:ef:46:5a:1c:10:81:af:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:C7:FE:B1:4D:30:75:37:0A:98:A9:82:C5:E0:17:E6:71:A4:F8
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/XFTH_rFNMHU3CpipgsXgF-ZxpPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.104.0/21
185.125.72.0/22
185.183.48.0/22
188.247.32.0/19
213.234.0.0-213.234.22.255
217.149.176.0/20
Signature Algorithm: sha256WithRSAEncryption
27:7c:f6:c0:26:ab:e7:4d:8f:6c:c3:42:2b:c7:50:1f:45:76:
6b:29:88:e6:ce:c0:bb:14:10:ad:a6:e3:e4:c9:36:e6:df:a6:
fc:4e:84:a5:89:2f:2d:aa:a0:a2:32:7c:48:1b:31:83:d8:a1:
3f:f7:9b:26:3d:5e:56:0e:e8:70:7b:f3:31:6f:dc:61:f9:ad:
15:75:c5:a0:a3:18:ca:94:b9:03:5a:02:d7:79:97:7c:60:4d:
75:37:a1:40:1c:e7:86:da:e7:1d:37:04:bf:7d:66:7e:d4:82:
56:f8:66:9b:7e:e2:9f:70:86:0d:2e:d7:9e:1e:70:6e:5b:c1:
70:d6:98:b2:3c:1a:52:b8:3c:03:1f:d2:08:56:72:a3:6f:91:
16:80:66:ac:4f:5f:68:9d:29:db:5b:bd:c4:81:8a:5c:b7:4e:
54:86:4e:11:5f:cb:72:37:43:2c:ce:00:43:b7:65:ec:9c:70:
4d:f0:74:1c:85:c6:8e:7a:de:b2:85:56:7f:bf:e6:9c:b1:69:
2d:c4:ed:da:58:55:dc:e1:3e:ca:5b:27:8c:a1:7f:62:b9:33:
6b:a5:2e:fb:b6:3a:01:b6:50:3e:a1:f5:26:a3:76:b0:8f:b3:
5c:dc:bf:b5:b8:e1:33:1f:1b:60:2d:d0:f0:09:a2:1a:a6:23:
91:02:c0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:33:02 2025 by rpki-client